--- title: Security advisory: CVE- 2026- 107457 Memory corruption... description: A memory corruption vulnerability tracked as CVE-2026-107457 affects QMqttClient in Qt MQTT. The flaw may crash applications that use MQTT 5. Qt Group advises... canonical: https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security advisory: CVE- 2026- 107457 Memory corruption vulnerability in QMqttClient impacts Qt MQTT | daily.dev og:description: A memory corruption vulnerability tracked as CVE-2026-107457 affects QMqttClient in Qt MQTT. The flaw may crash applications that use MQTT 5. Qt Group advises... og:url: https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt og:image: https://api.daily.dev/og/posts/xl7BmizjT.png og:image:alt: Security advisory: CVE- 2026- 107457 Memory corruption vulnerability in QMqttClient impacts Qt MQTT og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security advisory: CVE- 2026- 107457 Memory corruption vulnerability in QMqttClient impacts Qt MQTT **[Qt](https://daily.dev/sources/qt)** · 1 min read · 1 upvotes · 0 comments ## Summary A memory corruption vulnerability tracked as CVE-2026-107457 affects QMqttClient in Qt MQTT. The flaw may crash applications that use MQTT 5. Qt Group advises updating to Qt 6.8.9, 6.11.3, 6.12.0 or later to fix the issue. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does CVE-2026-107457 affect in Qt MQTT? CVE-2026-107457 is a memory corruption vulnerability in QMqttClient, part of Qt MQTT. It can crash applications that use MQTT 5. The fix is included in Qt 6.8.9, 6.11.3, 6.12.0 and later releases, so affected projects should update to one of those versions. _Teams running Qt MQTT in production can track advisories like this on daily.dev to patch before an MQTT 5 crash hits._ ## Similar posts on daily.dev - [Security advisory: CVE- 2026- 105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt](https://daily.dev/posts/security-advisory-cve--2026--105924-null-pointer-dereference-vulnerability-in-qcborvalue-to-json-co-cokdnkak3) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-107157 Out-of-bounds read vulnerability in QCborValue::fromCbor\(\) impacts Qt Framework](https://daily.dev/posts/security-advisory-cve-2026-107157-out-of-bounds-read-vulnerability-in-qcborvalue-fromcbor-impact-sehtor5ev) · Qt · 0 upvotes · 0 comments - [Security advisory: CVE-2026-105946 Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt](https://daily.dev/posts/security-advisory-cve-2026-105946-out-of-bounds-read-vulnerability-in-ntlm-authentication-handling--fakikzvwv) · Qt · 1 upvotes · 0 comments - [Security advisory: CVE-2026-96432 - Null pointer dereference vulnerability in QNetworkAccessManager impacts Qt](https://daily.dev/posts/security-advisory-cve-2026-96432---null-pointer-dereference-vulnerability-in-qnetworkaccessmanager--zmilvwptr) · Qt · 0 upvotes · 0 comments - [CVE-2025-12790 \(mqtt\): MQTT does not validate hostnames](https://daily.dev/posts/cve-2025-12790-mqtt-mqtt-does-not-validate-hostnames-tnvmg77iw) · RUBYLAND · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#backend](https://daily.dev/tags/backend), [#qt](https://daily.dev/tags/qt) [View this post on daily.dev](https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security advisory: CVE- 2026- 107457 Memory corruption vulnerability in QMqttClient impacts Qt MQTT","url":"https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt"},"datePublished":"2026-10-30T10:35:28.667Z","dateModified":"2026-10-30T10:35:55.636Z","description":"A memory corruption vulnerability tracked as CVE-2026-107457 affects QMqttClient in Qt MQTT. The flaw may crash applications that use MQTT 5. Qt Group advises...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0ba7e37aa06724863fcb985328eb4058?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Qt","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Qt","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/fe6d7c1f4f824966befd58ee13f9de40","url":"https://daily.dev/sources/qt"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,backend,qt","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Qt","item":"https://daily.dev/sources/qt"},{"@type":"ListItem","position":3,"name":"Security advisory: CVE- 2026- 107457 Memory corruption vulnerability in QMqttClient impacts Qt MQTT"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-advisory-cve--2026--107457-memory-corruption-vulnerability-in-qmqttclient-impacts-qt-mqtt-xl7bmizjt#faq","mainEntity":[{"@type":"Question","name":"What does CVE-2026-107457 affect in Qt MQTT?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-107457 is a memory corruption vulnerability in QMqttClient, part of Qt MQTT. It can crash applications that use MQTT 5. The fix is included in Qt 6.8.9, 6.11.3, 6.12.0 and later releases, so affected projects should update to one of those versions. Teams running Qt MQTT in production can track advisories like this on daily.dev to patch before an MQTT 5 crash hits."}}]} ```